As a matter of fact, it does not matter that much as Google just copies it to the US. From their “Compliance” page: https://privacy.google.com/businesses/compli

As a matter of fact, it does not matter that much as Google just copies it to the US. From their “Compliance” page: https://privacy.google.com/businesses/compliance/ https://privacy.google.com/businesses/compliance/ “ We continue to offer a range of international data-transfer mechanisms and we are certified under the EU - U.S. and Swiss - U.S. Privacy Shield frameworks, which are a legal mechanism to enable the transfer of personal data from the EEA and Switzerland to the US, where certified organizations guarantee to provide a level of protection in line with EU data protection law. We also offer EU-approved Model Contract Clauses for some services. “We will continue to monitor the evolution of international data-transfer mechanisms under the GDPR, and are committed to having a lawful basis for data transfers in compliance with applicable data protection laws.” I find it interesting they do not specify what data is internationally transferred, and that they “monitor the evolution” of mechanisms that are compliant with the GDPR, but never say they themselves are compliant. They only position themselves in the light of a Data Processor of the GDPR, but not the actual Data Controller (eg Google Search). It all smells very fishy.